Images

391 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 391 available now.

A+
jetty
Eclipse Jetty, the lightweight Java web server and servlet container (Jakarta EE 10 on 12.0, EE 11 on 12.1), from the official jetty-home…
v12.1.14121.6 MB2 versions
GatewaystandardEPL-2.0 OR Apache-2.0
A+
jmeter
Apache JMeter load-testing and performance-measurement tool, the official binary distribution running on a hardened Wolfi JRE. Image only, no chart.
v5.6.3142.8 MB
ObservabilitystandardApache-2.0
A+
joomla
Joomla, the PHP content-management system. The official Full_Package release on a hardened Wolfi php-8.3-fpm + nginx runtime (nonroot, read-only…
v6.1.497.0 MB2 versions
Apps & productivitystandardGPL-2.0+
A+
jre
Hardened Java runtime (JRE) for running a built jar, no compiler. Pair with the jdk, maven, or gradle build image. LTS lines 17/21/25.
v25.0.4.183.4 MB3 versions
Runtime basestandardGPL-2.0-with-classpath-exception
A+
jupyterhub
JupyterHub, the multi-user server that gives each user their own Jupyter notebook server, here as the hub with KubeSpawner (notebooks as pods) and…
v6.0.167.2 MB2 versions
Machine learning & AIstandardBSD-3-Clause
A 1
k6
Developer-friendly load and performance testing tool scripted in JavaScript. Single static Go binary on a hardened nonroot Wolfi base; test scripts…
v2.3.017.1 MB
ObservabilitystandardAGPL-3.0
A+
Kafka
Distributed event-streaming platform for high-throughput, durable, replayable publish-subscribe pipelines and stream processing.
v4.3.1206.5 MB
MessagingcriticalApache-2.0
A 1
kafka-exporter
kafka_exporter, the Prometheus exporter for Kafka brokers, topics, partitions and consumer-group lag. Built from the release tag as one static…
v1.10.07.2 MB3 versions
ObservabilitystandardApache-2.0
A+
karapace
Karapace, Aiven's Kafka schema registry (Avro, JSON Schema, Protobuf) and REST proxy, both Confluent-API compatible. From the tagged source into a…
v6.2.4125.0 MB
MessagingstandardApache-2.0
A 2
keda
Kubernetes event-driven autoscaler that scales workloads based on external event sources (queues, streams, metrics). Ships the operator and metrics…
v2.21.087.2 MB
CoordinationstandardApache-2.0
A+
Keycloak
Open-source identity and access management server providing SSO, user federation, and OAuth2/OIDC and SAML for apps and APIs.
v26.8.0232.7 MB2 versions
IdentitystandardApache-2.0
A 1
kgateway
kgateway, the CNCF Gateway API control plane that succeeded Gloo Edge. Watches Gateway, HTTPRoute, GRPCRoute and its own gateway.kgateway.dev policy…
v2.4.685.0 MB2 versions
GatewaystandardApache-2.0